Skip to main content
POST
Assign a card to a member

Authorizations

Authorization
string
header
required

A Dueflow access token: dfp_ (personal) or dfs_ (service). Permissions are the token's scopes intersected with the role ceiling, re-evaluated per request.

Scopes

cards:write

Headers

Idempotency-Key
string
required

A unique key per logical operation, e.g. a UUID. Keys are remembered for 24 hours per token: a retry within that window with the same key replays the original response (marked Idempotent-Replayed: true) instead of repeating the write; reusing a key with different parameters is a 409.

Maximum string length: 255

Path Parameters

cardId
string
required

Body

application/json
memberId
string | null
required

Response

Success

id
string
required
name
string | null
required
status
enum<string> | null
required
Available options:
active,
frozen,
canceled,
invited,
denied,
null
last4
string | null
required
spendLimit
string | null
required
spendLimitFrequency
enum<string> | null
required
Available options:
daily,
weekly,
monthly,
one_time,
null
transactionLimit
string | null
required
assignedMemberId
string | null
required
invitedAt
string<date-time> | null
required

Timestamp: RFC 3339, UTC, millisecond precision (2026-01-31T17:04:05.123Z).

activatedAt
string<date-time> | null
required

Timestamp: RFC 3339, UTC, millisecond precision (2026-01-31T17:04:05.123Z).

canceledAt
string<date-time> | null
required

Timestamp: RFC 3339, UTC, millisecond precision (2026-01-31T17:04:05.123Z).

createdAt
string<date-time>
required

Timestamp: RFC 3339, UTC, millisecond precision (2026-01-31T17:04:05.123Z).

updatedAt
string<date-time>
required

Timestamp: RFC 3339, UTC, millisecond precision (2026-01-31T17:04:05.123Z).